Skip to content

Spec for MSC4277: Harmonizing the reporting endpoints#2311

Open
Johennes wants to merge 3 commits intomatrix-org:mainfrom
Johennes:johannes/msc4277
Open

Spec for MSC4277: Harmonizing the reporting endpoints#2311
Johennes wants to merge 3 commits intomatrix-org:mainfrom
Johennes:johannes/msc4277

Conversation

@Johennes
Copy link
Contributor

@Johennes Johennes commented Feb 12, 2026

Pull Request Checklist

Preview: https://pr2311--matrix-spec-previews.netlify.app

Signed-off-by: Johannes Marbach <n0-0ne+github@mailbox.org>
Copy link
Member

@richvdh richvdh left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks! A couple of things

This endpoint now requires the user to be joined to the room.
1.18: |
The `score` request parameter was removed. Additionally, servers
may deny event ID enumeration by using the 200 response
Copy link
Member

@richvdh richvdh Feb 24, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
may deny event ID enumeration by using the 200 response
may prevent event ID enumeration by using the 200 response

(The word 'deny' sounds a bit more active -- like the server should actively monitor for clients that are enumerating event IDs and return a 4xx or something. 'Prevent' reads a bit more passive.)

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The MSC isn't explicit about it, but can servers apply the same logic to non-existent room IDs?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hm, yeah, I guess by extension of the same argument, that would make a lot of sense. I hadn't thought of that before.

How do we deal with the MSC missing this?

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

the MSC just says "MAY respond with 200 and no content regardless of whether the reported subject exists". I think we can squint at that "reported subject" and claim that it allows non-existent room IDs here.

Johennes and others added 2 commits February 25, 2026 11:52
Co-authored-by: Richard van der Hoff <1389908+richvdh@users.noreply.github.com>
Co-authored-by: Richard van der Hoff <1389908+richvdh@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants